c3aed7b0cd
Leave pam_selinux enabled by default in su.pam and remove it from the /etc/pam.d/su and /etc/pam.d/su-l files if libselinux is not selected. This cosmetic change prevents leaving a misleading commented-out line that references a PAM module that does not exist. Signed-off-by: Carlos Santos <unixmania@gmail.com> Signed-off-by: Arnout Vandecappelle (Essensium/Mind) <arnout@mind.be>
16 lines
398 B
Plaintext
16 lines
398 B
Plaintext
auth sufficient pam_rootok.so
|
|
auth required pam_wheel.so use_uid
|
|
auth required pam_env.so
|
|
auth required pam_unix.so nullok
|
|
|
|
account required pam_unix.so
|
|
|
|
password required pam_unix.so nullok
|
|
|
|
session required pam_selinux.so close
|
|
session required pam_limits.so
|
|
session required pam_env.so
|
|
session required pam_unix.so
|
|
session optional pam_lastlog.so
|
|
session required pam_selinux.so open
|